Easy!Appointments uses hard-coded credentials

CRITICO 9.8CVE-2023-1269 · GHSA-347f-rxg8-qgrv · Published 08/03/2023 · updated 17/06/2026

In breve

CVE-2023-1269 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda alextselegidis/easyappointments, easyappointments (easyappointments).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.74%, superiore al 54.7% delle vulnerabilità.
Correzione: aggiornare a 1.5.0 o successiva.

Package	Affected versions	Patched versions
alextselegidis/easyappointments Packagist	`≤ 1.4.3`	No fix yet
easyappointments easyappointments	`< 1.5.0`	`1.5.0`

Description

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments 1.4.3 and prior. A patch is available and anticipated to be part of version 1.5.0.

NVD description

Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

References

nvd.nist.gov/vuln/detail/CVE-2023-1269 · ADVISORY
alextselegidis/easyappointments commit 2731d2f · WEB
alextselegidis/easyappointments · PACKAGE
huntr.dev/bounties/91c31eb6-024d-4ad3-88fe-f15b03fd20f5 · WEB

Altre vulnerabilità di alextselegidis/easyappointments

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

alextselegidis/easyappointments

Packagist

≤ 1.4.3

No fix yet

easyappointments

< 1.5.0

1.5.0

Altre vulnerabilità di alextselegidis/easyappointments

Vedi tutto →